PT-2009-4039 · Microsoft · Windows Server 2003+5

Vinay Anantharaman · Published 2009-08-12 · Updated 2023-12-07 · CVE-2009-1545

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2, XP SP3, Server 2003 SP2, Vista Gold, Vista SP1, Vista SP2, Server 2008 Gold, Server 2008 SP2

Description: A remote code execution issue exists in the way Microsoft Windows handles specially crafted AVI format files. This could allow code execution if a user opens a specially crafted AVI file. If successfully exploited, an attacker could take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with fewer user rights on the system compared to those operating with administrative user rights.

Recommendations: For Windows 2000 SP4, consider applying the relevant security update to resolve the issue. For Windows XP SP2 and SP3, apply the security update to fix the vulnerability. For Windows Server 2003 SP2, install the update to mitigate the risk. For Windows Vista Gold, SP1, and SP2, apply the security patch to resolve the issue. For Windows Server 2008 Gold and SP2, install the relevant security update to fix the vulnerability.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-1545

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 10

• http://vupen.com/english/advisories/2009/2233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1545 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1545 · Security Note
• http://secunia.com/advisories/36206 · Vendor Advisory
• http://securityfocus.com/bid/35967 · Patch
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-038 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5412 · Note
• http://securitytracker.com/id?1022711 · Note
• http://us-cert.gov/cas/techalerts/TA09-223A.html · Note